Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/microweber/microweber@2.0.4
purl pkg:composer/microweber/microweber@2.0.4
Next non-vulnerable version 2.0.20
Latest non-vulnerable version 2.0.20
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ardw-ehgx-2uas
Aliases:
CVE-2023-49052
GHSA-2c7x-w3mx-h7p6
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component. There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-1mcj-auz4-kffm Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method. CVE-2023-48122
GHSA-p8q6-qrgj-7gx2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:46:32.827873+00:00 GitLab Importer Fixing VCID-1mcj-auz4-kffm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/microweber/microweber/CVE-2023-48122.yml 38.6.0
2026-06-02T04:46:28.052056+00:00 GitLab Importer Affected by VCID-ardw-ehgx-2uas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/microweber/microweber/CVE-2023-49052.yml 38.6.0